CVE-2007-1870: Null Pointer Dereference
Published Apr 18, 2007
·Updated
lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.
Affected Software
30 affected components
Lighttpd Lighttpd=1.3.0
Lighttpd Lighttpd=1.3.1
Lighttpd Lighttpd=1.3.2
Lighttpd Lighttpd=1.3.3
Lighttpd Lighttpd=1.3.4
Lighttpd Lighttpd=1.3.5
Lighttpd Lighttpd=1.3.6
Lighttpd Lighttpd=1.3.7
Lighttpd Lighttpd=1.3.8
Lighttpd Lighttpd=1.3.9
Lighttpd Lighttpd=1.3.10
Lighttpd Lighttpd=1.3.11
Lighttpd Lighttpd=1.3.12
Lighttpd Lighttpd=1.3.13
Lighttpd Lighttpd=1.3.14
Lighttpd Lighttpd=1.3.15
Lighttpd Lighttpd=1.3.16
Lighttpd Lighttpd=1.4.0
Lighttpd Lighttpd=1.4.1
Lighttpd Lighttpd=1.4.2
Lighttpd Lighttpd=1.4.3
Lighttpd Lighttpd=1.4.4
Lighttpd Lighttpd=1.4.5
Lighttpd Lighttpd=1.4.6
Lighttpd Lighttpd=1.4.7
Lighttpd Lighttpd=1.4.8
Lighttpd Lighttpd=1.4.9
Lighttpd Lighttpd=1.4.10
Lighttpd Lighttpd=1.4.12
Lighttpd Lighttpd=1.4.13
Remediation
Patch Available
Event History
Apr 18, 2007
CVE Published
03:19 AM
CVE Published
via MITRE·06:20 AM
Data Sourced
via MITRE·06:20 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1870?
The severity of CVE-2007-1870 is classified as a denial of service vulnerability.
2
How do I fix CVE-2007-1870?
To fix CVE-2007-1870, you should upgrade to lighttpd version 1.4.14 or later.
3
What versions of lighttpd are affected by CVE-2007-1870?
CVE-2007-1870 affects lighttpd versions prior to 1.4.14, including 1.4.3, 1.4.8, 1.3.0, and several others.
4
What type of attack does CVE-2007-1870 exploit?
CVE-2007-1870 exploits a NULL pointer dereference, causing the server to crash.
5
Is CVE-2007-1870 a critical vulnerability?
While it causes a denial of service, CVE-2007-1870 is not classified as a critical vulnerability but requires immediate attention.